Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.mft
File: UaVmbTI7-EL2BEznEFl3PiJxsBM.mft (raw, json)
Hash identifier: AbsobFEK5wH9LlKunVG+yRXShl1y2yTXFKQejukf+Xs=
Subject key identifier: 65:EB:41:2A:57:F9:EB:00:92:B9:C2:CD:13:CA:C4:68:33:49:A7:06
Authority key identifier: 51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
Certificate issuer: /CN=51A5666D323BF842F6044CE71059773E2271B013
Certificate serial: 23FE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.mft
Manifest number: 23EC
Signing time: Wed 18 Mar 2026 01:28:56 +0000
Manifest this update: Wed 18 Mar 2026 01:28:56 +0000
Manifest next update: Wed 18 Mar 2026 07:28:56 +0000
Files and hashes: 1: Dxf2IGNyXg9I98tAtX9uZk6GXVc.roa (hash: ONovWuC+zq8l+bwh2lQi2A19xeNKL6TpIuIc732PvrY=)
2: K6dM3LoliVMQPn-6OZ8bO8A4Ux8.roa (hash: /DWeD+5yM4Zt5ioOX6r2bUHR2V5mYF+BbU8pekEVfcQ=)
3: UaVmbTI7-EL2BEznEFl3PiJxsBM.crl (hash: s5aGufLSiyXYnIeacvZHggPcubdgVtMie8o4nUaEtos=)
4: ezOO06_iD-bkUiK6a-jQQGyReTA.roa (hash: ffFfC37zZTiTuY/DyHhesVn6JkVaEASjK4B14hmOzoM=)
5: qQWXGEqmaabu6rR7VtaHiAiwOSg.roa (hash: CaxhdE2ToO1BsO0P9BXP8buuK40zGyoXTIP3IN4keuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9214 (0x23fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A5666D323BF842F6044CE71059773E2271B013
Validity
Not Before: Mar 18 01:28:56 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=65EB412A57F9EB0092B9C2CD13CAC4683349A706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:9a:b1:09:93:4a:bd:56:41:8e:50:8f:f5:
68:28:a1:9a:d7:87:53:1f:cc:0d:43:df:d4:16:0a:
c9:ba:f3:e3:46:94:1d:ff:cc:fc:8b:72:39:9e:46:
48:00:a2:34:96:f7:cf:e2:da:6c:75:8c:58:12:3d:
f3:e6:df:b7:b7:54:eb:06:f0:b4:53:f5:2b:eb:b4:
0e:0a:f3:20:3f:c4:0c:56:33:c5:12:42:61:02:bb:
9c:98:1f:02:99:d7:64:9d:23:47:7f:f9:4d:b8:0d:
01:97:74:f5:1f:e4:9e:df:95:b5:d3:70:15:be:f6:
7a:3c:c2:a9:bc:ed:3b:16:a7:7e:4d:82:b9:45:90:
d7:2f:47:fa:a7:22:b6:06:3c:1c:ea:ff:5a:be:a8:
41:c3:6d:01:56:a0:a7:6a:4c:48:82:4a:02:fc:ce:
08:ae:21:32:8a:6a:d0:21:63:71:8e:48:c0:1b:d8:
62:2a:74:f9:14:0a:ab:f6:b7:3b:8e:2a:cd:3b:fc:
e0:26:15:73:e5:36:60:32:0b:bb:b7:2d:56:77:5e:
df:4b:e2:8b:c8:91:65:e1:fe:c1:f1:55:64:9e:58:
26:45:f7:db:5c:0b:c7:e5:5f:c6:98:1c:e0:96:a3:
26:37:d4:05:69:d4:f0:92:14:76:7c:50:a4:36:da:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:41:2A:57:F9:EB:00:92:B9:C2:CD:13:CA:C4:68:33:49:A7:06
X509v3 Authority Key Identifier:
keyid:51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:7c:2b:c9:9b:62:f9:dc:ea:3e:7e:b9:16:65:73:de:a4:40:
0a:3b:da:ac:ec:2c:59:67:17:bc:48:d8:0d:6d:92:9d:d2:5a:
34:cb:79:34:84:70:d7:40:fb:7e:29:1c:a6:50:68:c6:57:b3:
08:39:83:30:1e:4a:df:60:f2:cc:4c:07:6a:b3:0e:f1:a1:8e:
e8:1d:0e:18:4f:30:20:a8:1b:62:9e:e4:22:da:72:6d:10:46:
14:a0:4f:8a:d0:a0:96:82:0a:25:e2:ca:32:10:77:07:24:08:
28:0f:d1:71:12:14:a0:25:93:26:87:f8:9a:ca:13:56:95:24:
f9:0d:a5:39:67:82:3f:8b:60:89:63:05:3b:30:d8:f8:2b:7b:
b0:6e:78:70:7e:43:18:83:f1:fa:ff:ed:5b:c0:51:9f:2e:d7:
d5:01:36:b9:4d:e3:96:24:c0:4a:cb:2b:60:7b:89:31:7f:09:
88:78:82:7c:27:32:76:ef:e9:8e:e6:a4:85:ad:de:24:19:d3:
03:b6:8c:bb:4a:9c:23:25:7f:10:25:f1:70:9b:97:25:40:2d:
bd:d1:cb:99:1b:c4:fb:54:28:84:43:2b:af:cf:f5:fa:d8:75:
cc:71:e5:8c:f7:c8:0a:50:4a:5b:a2:a7:87:c0:3e:3c:af:e1:
da:8e:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:06:16 2026 by rpki-client